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IN THE CLAIMS : 

Please amend the claims as follows: 

1 . (currently amended) A method for monitoring usage of resources allocated 
to a plurality of nodes of a network, comprising the steps of: 

{a) assigning to - a nod e a parameter to each of a plurality of nodes of the 
network, wherein each parameter is indicative of a rate of change of usage of said 
resources of the node : 

(b) locally monitoring, at each of the node nodes , the rate of change of the usage 
of said resources of the node : 

{g) reporting to a centralized management station of the network when the rate of 
change of the usage of the resources of one of the nodes exceeds a first prodotorminod 
threshold; and 

initiating a globa l poll of resources of ot l oas t on o other nodo from tho plurality 
ef nodes of the network by the centralized management station in response to reporting 
from the node or a time interval being exceeded: 

determining whether a sum of the currently reported rates of change of usage of 
node resources, received in response to the poll initiated bv the management station, 
exceeds a second threshold: and 

generating an alarm if the sum of the currently reported rates of chance of usage 
of node resources exceeds the second threshold, else updating the time interval . 

2-5. (cancelled) 

6. (previously presented) The method of claim 1 , further including the step of 
adjusting the usage of the resources at one or more of said nodes. 

7. (previously presented) A method for monitoring usage of a resource in 
nodes of a network, comprising the steps of: 

(a) monitoring usag© of the resource in a noae to determine when a rate of 
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change of the usage exceeds a first predetermined threshold; 

(b) reporting to a management station of the network when the rate of change of 
the usage exceeds said first predetermined threshold; and 

(c) initiating a poll of resources in the nodes of the network by the management 
station in response to reporting from the node or a time interval being exceeded. 

8. (previously presented) A method for monitoring usage of resources in 
nodes of a network, comprising the steps of: 

asynchronous reporting of an event to a management station of the network 
when a rate of change of a usage of at least one resource of said resources in any of 
said nodes deviates from a prescribed norm; and 

periodic polling of said nodes in accordance with a polling interval, and aperiodic 
polling of said nodes in response to reporting of said event, wherein a tunable 
parameter is adjusted in response to the usage. 

9. (Currently Amended) A t e chn i qu e method for managing a global resource 
of a network in order to reduce the amount of monitoring related traffic, comprising the 
steps of: 

partitioning the global r e sourco i nto a p l urality of node ro'oourcoo, whoroin 
oaoh nodo rosourco is - assign e d to o c op a r ato node of tho network; 

assigning a budget local threshold to each sate of a plurality of node resourc e 
resources of a respective plurality of nodes of the network : 

reporting to a management station of the network when a node value indicative 
of node resource usage exceeds the assigned budget local threshold as determined 
using local monitoring of the node resource; 

Initiating a poll, by the management station, of node resource usage by the 
nodes of the network in response to a determination that a sum of previously reported 
budget values indicative of node resource usage received from reporting nodes plus an 
upper bound of budgo t v a l ues node resource usage for non-reporting nodes exceeds a 
threshold; and 
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generating an alarm if the sum of the currently reported budg e t values indicative 
of node re source usage , received in response to the poll initiated by the management 
station, of tho roporting nodos exceeds the threshold. 

1 0. (currently amended) A toohniquo methoo 1 for managing a global resource 
of a network in order to reduce the amount of monitoring related traffic, comprising the 
steps of: 

part i tioning th e globo l-p o s ourc e into a p l urality of nodo rosouroos, whoro to 
e ach nodo rosouroo ia aooignod to a soparato nod e of - the - n e twork; 

assigning to tho nodo a rato of usag e of tho a local threshold to each sale" of a 
plurality of node rocourco resources of a respective plurality of nodes of the network : 

reporting to a management station of the network when saM a rate of change of 
usage of said node resource exceeds a pre - dotorminod the local threshold as 
determined using local monitoring of the node resource, wherein said rate of change of 
usage of said node resource is determined using a variable time interval comprising a 
difference between a current time and a time at which the node was last polled bv the 
management station : 

initiating a poll, by the management station, of the node resource usage of the 
nodes of the network in response to receiving reporting from one of the nodes or a time 
interval being exceeded : 

determining whether the a sum of the currently reported rates of change of usage 
of node resources, re ceived in response to the poll initiated bv the management station. 
of tho roporting nodoo exceeds a threshold; and 

generating an alarm if the sum of the currently reported rates of change of usaoe 
of node resources of tho roporting nodoo exceeds the threshold. 

1 1 . (previously presented) The method defined in claim 8 wherein said nodes 
are selected from the group consisting of routers; switches, bridges, and firewall 
devices. 
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12. (previously presented) The method defined in claim 8 wherein said nodes 
are selected from the group consisting of servers, hosts, and layer 4-7 switches. 

13. (cancelled) 

1 4. (previously presented) The method of claim 7, further comprising: 

(d) summing all the reported rate of change of the usage of the resources; and 

(e) generating an alarm if the sum exceeds a second threshold, else updating the 
time interval. 
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